CVE-2019-14523

CVE-2019-14523 affects Schism Tracker (up to 20190722). The issue is an integer underflow in the Amiga Oktalyzer parser (fmt/okt.c) that underpins the vulnerability. Public advisories detail fixes in OpenSUSE/SU patches (e.g., openSUSE-2019:2019-1, openSUSE-SU-2019:2019-1) and related GLSA/Nessus...

CVE-2019-14524

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

PT-2019-13730

Name of the Vulnerable Software and Affected Versions Schism Tracker versions prior to 20190723 Description An issue was discovered in the Amiga Oktalyzer parser, specifically in the fmt okt load song function in fmt/okt.c, where an integer underflow can occur via a large plen. Recommendations Fo...

PT-2019-13731

Name of the Vulnerable Software and Affected Versions Schism Tracker versions prior to 20190722 Description A heap-based buffer overflow issue was discovered, which occurs via a large number of song patterns in the fmt mtm load song function in fmt/mtm.c. Recommendations For versions prior to...

CVE-2019-14524: Out-of-bounds Write

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

CVE-2019-14523: Integer Underflow (Wrap or Wraparound)

An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmtoktloadsong in the Amiga Oktalyzer parser in fmt/okt.c...

DEBIAN-CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

Heap overflow

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

PT-2019-15990

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a missing bounds check in the ih264d fmt conv 420sp to 420p function of ih264d format conv.c, which could lead to a possible out of bounds write. This might result in remote co...

PT-2019-15993

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a missing bounds check in the ihevcd fmt conv 420sp to 420p function of ihevcd fmt conv.c, which could lead to a possible out of bounds write. This might result in remote code...

Denial Of Service (DoS)

libglusterfs.so is vulnerable to a denial of service DoS attack. A malicious user can pass a string using the fmt command with the %s and %d characters to cause the application to crash...

PT-2018-1618

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to the impeg2 fmt conv yuv420p to yuv420sp uv av8 function in the Media framework component of the Android operating system. It involves an out-of-bounds write due to a missing...

CVE-2018-11133

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...

CVE-2018-11133: Improper Neutralization of Input During Web Page Generation

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...

PT-2018-10324

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns a cross-site scripting vulnerability in the '/common/run cross report.php' script. Specifically, the fmt parameter is vulnerable. Recommendations For Quest...

CVE-2017-13277

In ihevcdfmtconv of ihevcdfmtconv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,...

PT-2018-5560

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to a missing bounds check in the ihevcd fmt conv function of ihevcd fmt conv.c, which could lead to a possible out of bounds write. This might result in remote code execution...

PT-2018-1151

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Automobile versions MDM9206, MDM9607, MDM9650, SD 210, SD 212, SD 205, SD 400, SD 410, SD 412, SD 425, SD 430, SD 450, SD 600, SD 602A, SD 615, SD 616, SD 415, SD 617, SD 625, SD 650, SD 652, SD 800, SD 808, SD 810, SD 820,...

fmtlib denial of service vulnerability

fmtlib is an open source formatting library based on C++ . A formatting string vulnerability exists in the 'fmt::print' library function in fmtlib versions prior to 4.1.0. An attacker can exploit this vulnerability to cause a denial of service memory corruption and invalid writes with invalid...

Memory corruption

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...